SIEMENS #2427021-S06564[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SIEMENS #2427021-S06564.exe
Size

884KB
MD5

408e21e802b42b750e49b02121c07dfb
SHA1

1d26f9adc8c7eccd3657ae750d7cba6186f1e3e9
SHA256

dd44b67e26093ebcc06c8af57d00738c4068630e2e55752507d36213fe015abe
SHA512

26804c2dcb08a259701ef1fbac9947b5a13a032f3cd2c48aedf6a1d4b5e8b8978b024d52baad3dde934ae97e485becacbc9ead3d03944dc0044b81561680a869
SSDEEP

12288:E8UbqaKeC/WdAcZkC2jL8zmYIyeltnalPXUWSMnNwby2EhIaBHO69:E8UbqatC/Wi9CsL8zLItaOYNa7G9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SIEMENS #2427021-S06564.exe

Files

SIEMENS #2427021-S06564.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

RdGZ.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 882KB - Virtual size: 881KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ